HPE Fabric Composer EUVD-2026-69577

Exploitation requires network adjacency to the AFC host (CVSS AV:A) - the attacker must be on the same logical/Layer 2 or management network segment, not the open Internet - but needs no credentials (PR:N) and no user interaction (UI:N), and the attack complexity is low (AC:L). The limiting factor is therefore reachability of the AFC management interface: an attacker without a presence on the management segment cannot reach the vulnerable service. The description does not name a specific non-default feature or configuration toggle, so the condition is presence on an adjacent network with access to the AFC OS/management service in its default authenticated posture.

The signals present are strong but incomplete. CVSS 9.6 with AV:A/AC:L/PR:N/UI:N indicates a low-complexity, unauthenticated attack requiring only adjacent (same L2/logical) network access, with a scope change and high confidentiality, integrity, and availability impact - a severe outcome for a fabric-management appliance that sits at the heart of the network control plane. The adjacency requirement (AV:A rather than AV:N) is the main mitigating factor: an attacker needs a foothold on the same broadcast/management segment rather than arbitrary Internet reachability, which favors targeted rather than internet-wide mass exploitation. Weighing this against the missing signals, there is no EPSS score, no KEV listing, and no POC in the provided data, so predicted exploitation probability cannot be quantified and there is no confirmation of active exploitation; the priority rests on severity and product criticality, not on observed attacks. Given that a compromised AFC host can pivot into the managed switching fabric, any organization running AFC - even a modest municipal or mid-sized operator IT team - should treat patching as urgent and not defer on the basis of the adjacent-only vector.

An attacker who gains a foothold on the same management network segment as the AFC appliance (for example via a compromised administrator workstation or another device on the management VLAN) sends crafted requests that bypass authentication and obtain privileged code execution on the AFC operating system. From there they fully control the fabric-management host and can pivot to reconfigure or disrupt the managed switching fabric. No public POC is identified at time of analysis, but the low attack complexity means a working exploit would be reliable once developed.